qr.net-promo.de

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:2d:8c:0b:a9:98:82:1f:36:ee:da:fc:09:33:77:d3:41 was issued on by Let's Encrypt.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qr.net-promo.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:2d:8c:0b:a9:98:82:1f:36:ee:da:fc:09:33:77:d3:41
Serial Number (int): 337620650403484735980151414723462057939777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:1d:f6:26:37:60:dc:ad:88:63:eb:65:b3:e3:84:64:dc:fb:b0:60
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:79:a3:14:95:f4:e1:6a:67:41:df:7e:f5:41:1a:90:6e:d1:4a:65
Fingerprint (sha256): b3:24:75:b6:73:8f:2d:58:30:13:64:2b:52:c4:52:43:15:68:53:9c:d9:e4:59:35:7a:4e:dd:0b:54:74:1e:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate qr.net-promo.de

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qr.net-promo.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsgvo.net-promo.de
net-promo.de
netpromo.de
qr.net-promo.de
sprachzertifikat.net-promo.de
www.net-promo.de
www.netpromo.de

Other certificates including the domain name net-promo.de

(limited to 100 certificates)
net-promo.de
net-promo.de
net-promo.de
qr.net-promo.de
net-promo.de
net-promo.de
net-promo.de
qr.net-promo.de
net-promo.de
net-promo.de
net-promo.de
net-promo.de
qr.net-promo.de
net-promo.de
net-promo.de
qr.net-promo.de
net-promo.de
net-promo.de
net-promo.de
qr.net-promo.de
net-promo.de

Certificate

The complete raw certificate details for qr.net-promo.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuc9mVn8ksxkUWEqZn1j/
p845QyQYCCRFXi/i4I9fixRkRQly/rNsaxm101IS2IKClsh/GYf8lGL4cmr5c+zm
1N7bqLpa0oF5EQpyo23oQm2KB5iqf6FxsKw2+MuFYK3y/X0gkqY8wDiStcK5vkXV
54Q+wYzByo+F871wu4HItLhplftTLwwgs9Yk6rtPIv5mJXecUvscMFKe/UQBtbAs
Bdmp2PxGiiBF8chLGBOcv9n6QiFyO9OxxdhBK4f5+iS0yTrGIjdTUgTqW29u3k3X
Sh8xtFfsOSapzBlIxabTonukdXilv6inHqP8bXzQbN6JjWDA5Up+a7xPKs4ab8qf
+6WfkUcwM1FV7W1pK+ytQwVheLLTsEUvulFDBraz2S9dC+JTUasnag2O1TdxSg/e
zs6bWp3P3VcniWr4wlwDK4bs95dJ9I6aM/kwQmMfykFBR0bLCR/cJNCLe7Kn6MZT
LS/rWtdP2i12w7dxDgp/xuzbuEif7JzZW71CpbH0lTgAV3fa7JXiYSGCKksKtxgG
GG0VPkIs2SDYZrjA9gIWrYUFECd9nIpGdl7tKV2446SqK5RTxbJR9C+cUHzMVaHZ
pb7S0y3sSiqwBVhHPJ+tyFmFjigJ4zHSNnHeNAPMkb3igo7nKWFeOL4NkHPeZ6JV
Rbfv9kLQMn9CesEg9Y7M7lMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337620650403484735980151414723462057939777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 00:14:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 00:14:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qr.net-promo.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758039297856056532545654179190819218759618195021607473901833686573992665672243242933320317962525187477591565548175593631960194779757692656425115503649079557210459890662264052951743220112225695809996934452317736769347363485210581683160817355538242209235131906249117989670002655298695026199987909641879835638935851691955684447933030154564312190995215233292804238770005849482116275531793552879982156824056646451336966069319107750907126703242144599207267243223901267589058887763264634405378366181231574832531711315431229980689117305099738494959929220750757096495939186131940296461000827194337566285571425724077152181983702982691554987268521155319578208657792781504024843166682092353117461946928489012988502165341225633349702615070067812155224040134634344892381706772765521508429660209266977919789233158321389774277589494734935739750310210572873064052123505858731106595980264642081773484843147397842584253795269411689795912637499866372504687871161253529871519877916354214217721966777813054753855791898059616784641791515005299181718242010556629492349468415878300173800033818222401084286840557842945994855777585101604123799258098326095485125881574789565186627096251024833378573515554394762115402093385075474976731567540721137238393358184019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b41df6263760dcad8863eb65b3e38464dcfbb060
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsgvo.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpromo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qr.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sprachzertifikat.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.net-promo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netpromo.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187da06853e000004030046304402201729239891c212d945f064d418dca93700205a7d8defbcdecdfcc2c3099a735902202fccd42d6b692a0529fe0687dbecf873582b0088c957fca76e7d76656373b55d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000187da06852c0000040300473045022079bf36d0a228308043533fbf27944feed055f5dcefe91451610e50ac2b84dea4022100bc8a4ab8613e0018dbb4d27329d8f5974eb9f395bb6a546eb16e1a9ac83fbe4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004e5bf919f043523515a292322446174a4174873528c0541cb7075e7f45e1508ec1f051e50b7c098e6b73570e701b085ad2a628817b5254308d22df1e2b7837c1d6dc24ae5d8db504b77f0b0b53c75b77b996c28bba36fbe18a24118426003254870546879b4693815d7464db94e5d38d8c86a2c335154a89260e58b9cddcb22e9ab5d7f0a88b020538f253d5efc491cba815d561ba185cd7a6c0f987f696b20bea10cc617850063a55dd201c19c36a27dccbe9ea9b1388d093cf3d7c39e4e8b9d32684a378ac37a5c92c8f5b560a86cf51c0296dfb3666a978e334b7caf4e7b4b67bb7ce78642329b54050e8664a2a5cbccfe54087493f5e3426a164c86a330a